Extracted

Extracted

Extracted

• • Target

    6bf3fcdc9e873358cceee1da9e9edb77dd118ec61de4185045da222691d01a1f

  • Size

    965KB

  • MD5

    82f8d07086e05e54f573713aaec25c11

  • SHA1

    6c79931156ff5a03650604b926054c9c004ae9dd

  • SHA256

    6bf3fcdc9e873358cceee1da9e9edb77dd118ec61de4185045da222691d01a1f

  • SHA512

    4d2ab900fa89a8525c7645093b4d0cb7eb5bc75e87728a2313c1f6c3cc154a23bed0dfc510f20887e1b76ce842fde43ce403bac02846f8fc9f9225cd4c7a7a32

  • SSDEEP

    12288:LizkWAVpsx7UgJCSkZZ7gFsRfIByCZeEAQ+ni5SZYzu99DzdXRnI:62psxIgJCSkjwQCyCse+nc8TnI

  Score

  10^/10

  amadeyhealerredlinesectopratsmokeloaderpixelscloudbackdoordropperinfostealerrattrojan

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat

  • SectopRAT payload

  • SmokeLoader

    Modular backdoor trojan in use since 2014.

    trojanbackdoorsmokeloader

  • Downloads MZ/PE file

  • Executes dropped EXE

  • Suspicious use of SetThreadContext

  behavioral1